View all jobs
Information Systems Security Expert 2
Annapolis Junction, MD · Computer/SoftwareINNOPLEX is a service-disabled veteran-owned small business that puts its employees first! Over the last 15 years we have built a company shaped by our workforce. We only hire the best, most driven, and talented people to help us support the most important customer in the world.
Job Description:
The Information Security Systems Engineer level 2, primary responsibility is to ensure the security and compliance of our organization's information systems. You will play a crucial role in safeguarding our data and systems by assisting in the development and maintenance of all necessary Certification and Accreditation (C&A) documents. Your role involves coordinating, tracking, and managing the C&A processes, both initial and recurring.
C&A Document Development: Assist in creating and maintaining all essential C&A documents required for compliance and security purposes.
Other responsibilities include:
Individual Capabilities/Experience Required:
Qualifications:
Individual Capabilities/Experience Desired:
Must have current, active TS/SCI clearance with Polygraph.
INNOPLEX, LLC is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected by law.
Job Description:
The Information Security Systems Engineer level 2, primary responsibility is to ensure the security and compliance of our organization's information systems. You will play a crucial role in safeguarding our data and systems by assisting in the development and maintenance of all necessary Certification and Accreditation (C&A) documents. Your role involves coordinating, tracking, and managing the C&A processes, both initial and recurring.
C&A Document Development: Assist in creating and maintaining all essential C&A documents required for compliance and security purposes.
Other responsibilities include:
- C&A Process Management: Provide coordination and oversight throughout the entire C&A process, ensuring that security measures are consistently upheld.
- Security Control Assessments: Independently evaluate and assess the effectiveness of security controls through interviews, examinations, and testing. Prepare assessment findings reports to identify vulnerabilities and weaknesses.
- Collaboration: Work closely with system owners to resolve findings, address questions, and ensure security measures are appropriately implemented.
- Cybersecurity Validation: Perform thorough cybersecurity reviews and validation services to assess the compliance of authorization deliverables, recording and reporting results.
- Risk Management Framework (RMF): Support the RMF process using relevant tools to maintain and enhance our organization's security posture.
- Continuous Monitoring: Implement continuous monitoring procedures and manage Plans of Action and Milestones (POA&M) to ensure timely resolution of security issues.
- Test Infrastructure Assessment: Evaluate systems deployed in test infrastructures to identify and address security concerns.
- Communication Skills: Utilize analytical, communication, and troubleshooting skills to facilitate proactive and effective collaboration. Clearly articulate status updates and present findings to customers and program leadership.
- Certification and Accreditation: Support planning and testing for Certification and Accreditation processes, including compliance with Secure the Enterprise/Secure the Network (STE/STN) and High-Value Asset (HVA) requirements.
- Systems Engineering Documentation: Contribute to systems engineering documentation, such as System Security Engineering Plans and Initial Capabilities documents.
- System Baseline Integrity: Ensure the technical integrity of the system baseline over time by continually updating it to reflect changes imposed during the system's lifecycle.
- Security Audits: Conduct system security audits in accordance with NSA/CSS policies and requirements to maintain the highest level of security.
Individual Capabilities/Experience Required:
- Participate as a security engineering representative on engineering teams for the design, development, implementation and/or integration of secure networking, computing, and enclave environments.
- Participate as a security engineering representative on engineering teams for the design, development, implementation and/or integration of IA architectures, systems, or system components.
- Participate as the primary security engineering representative on engineering teams for the design, development, implementation, evaluation, and/or integration of secure networking, computing, and enclave environments.
- Apply knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments.
- Interact with the customer and other project team members.
- Participate as the primary security engineering representative on engineering teams for the design, development, implementation, evaluation, and/or integration of IA architectures, systems, or system components.
- Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures.
- Support security planning, assessment, risk analysis, and risk management
- Identify overall security requirements for the proper handling of Government data.
- Provide security planning, assessment, risk analysis, and risk management.
- Perform system or network designs that encompass multiple enclaves, to include those with differing data protection/classification requirements.
- Recommend system-level solutions to resolve security requirements.
- Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures.
Qualifications:
- Fourteen (14) years’ experience as an ISSE on programs and contracts of similar scope, type, and complexity is required. Bachelor’s degree in computer science, Information Assurance, Information
- Security System Engineering, or related discipline from an accredited college or university is required. DoD 8570.01-M compliance with IASAE Level 2 is required CISSP Certification is required. Four (4) years of ISSE experience may be substituted for a bachelor’s degree.
Individual Capabilities/Experience Desired:
Must have current, active TS/SCI clearance with Polygraph.
INNOPLEX, LLC is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected by law.